{"id":"F2020L01438","name":"Industry Research and Development (Cyber Security Business Connect and Protect Program) Instrument 2020","slug":"industry-research-and-development-cyber-security-business-connect-and-protect-program-instrument-202","collection":"legislative_instrument","jurisdiction":"commonwealth","status":"in_force","isInForce":true,"actNumber":null,"makingDate":null,"administeringDepartment":null,"currentVersion":{"id":440664,"registerId":"F2020L01438-fast-fetch-1775956221392","compilationNumber":null,"startDate":"2026-04-12","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"1","sectionType":"section","heading":"Industry Research and Development (Cyber Security Business Connect and Protect Program) Instrument 2020","content":"---\nmeta-content-style-type: text/css\nmeta-content-type: application/xhtml+xml; charset=utf-8\n---\n\n?xml version=\"1.0\" encoding=\"utf-8\" standalone=\"no\"?>\n\n![Commonwealth Coat of Arms of Australia](image.001.jpeg)\n\n \n\nIndustry Research and Development (Cyber Security Business Connect and Protect Program) Instrument 2020\n\nI, Karen Andrews, Minister for Industry, Science and Technology, make the following instrument.\n\nDated 17 November 2020\n\nKaren Andrews\n\nMinister for Industry, Science and Technology\n\n \n\n \n\n \n\n \n\nContents\n\n1 Name\n\n2 Commencement\n\n3 Authority\n\n4 Definitions\n\n5 Prescribed program\n\n6 Specified legislative power\n\n \n\n1  Name\n\n  This instrument is the Industry Research and Development (Cyber Security Business Connect and Protect Program) Instrument 2020.\n\n2  Commencement\n\n (1) Each provision of this instrument specified in column 1 of the table commences, or is taken to have commenced, in accordance with column 2 of the table. Any other statement in column 2 has effect according to its terms.\n\n \n\n- Commencement information\n- Column 1 Column 2 Column 3\n- Provisions Commencement Date/Details\n- 1. The whole of this instrument The day after this instrument is registered. 20 November 2020\n\n\nNote: all This table relates only to the provisions of this instrument as originally made. It will not be amended to deal with any later amendments of this instrument.\n\n (2) Any information in column 3 of the table is not part of this instrument. Information may be inserted in this column, or information in it may be edited, in any published version of this instrument.\n\n3  Authority\n\n  This instrument is made under section 33 of the Industry Research and Development Act 1986.\n\n4  Definitions\n\n  In this instrument:\n\nAct means the Industry Research and Development Act 1986.\n\nprogram: see subsection 5(1).\n\n5  Prescribed program\n\n (1) For the purposes of subsection 33(1) of the Act, the Cyber Security Business Connect and Protect Program (the program) is prescribed.\n\n (2) The program provides funding to organisations for the purpose of:\n\n (a) supporting the capability of small and medium enterprises to achieve best practice in cyber security by raising awareness of cyber security risks and promoting action by such enterprises to address such risks; and\n\n (b) increasing the cyber security capability and resilience of Australia’s small and medium enterprises.\n\n6  Specified legislative power\n\n  For the purposes of subsection 33(3) of the Act, the powers of the Parliament to make laws with respect to postal, telegraphic, telephonic, and other like services (within the meaning of paragraph 51(v) of the Constitution) is specified.\n","sortOrder":0}],"analysis":{"kimi_summary":{"content_quality":"ok","complexity_score":2,"scope_assessment":{"changed":false,"description":"This is a straightforward legislative instrument that does exactly what its title suggests: prescribes a specific cyber security grant program. There is no evidence of scope creep; it remains tightly focused on establishing the program under the parent Act."},"complexity_factors":["Only 6 short sections total","Minimal defined terms (only 2: 'Act' and 'program')","No cross-references to other legislation beyond the parent Act","No conditional logic, exceptions, or nested provisions","Straightforward purpose and operation with no procedural requirements","Single substantive provision (section 5) describing the program"],"plain_english_summary":"The Act establishes the Cyber Security Business Connect and Protect Program to fund organisations that help small and medium enterprises improve cyber security awareness, skills and resilience, and encourage protective action. \n\nIt affects SMEs receiving assistance, providers applying for grants, and agencies administering the scheme—addressing the gap that leaves small businesses vulnerable to cyber attacks. The program is made under the Industry Research and Development Act 1986 (telecommunications power)."},"flash_summary":{"complexity_score":2,"scope_assessment":{"changed":false,"description":"The instrument itself contains no amendment history and expressly states the commencement table relates to the instrument as originally made (s2 note). It prescribes the program and specifies the legislative power without altering scope from its original text."},"complexity_factors":["Narrow subject-matter: only prescribes a single program and gives brief purpose statements (see s5).","Short instrument length and straightforward structure: name, commencement, authority, definitions, prescribed program, specified legislative power (ss1–6).","Legal cross-references: depends on external Acts and powers (Industry Research and Development Act 1986 s33; Constitution para 51(v)) which require users to consult other texts.","Operational details omitted: funding mechanics, eligibility, application and administrative rules are not set out here, leaving implementation discretion to administrators (s5).","Commencement mechanics included in a technical table, with a note limiting the table to the instrument as originally made (s2)."],"plain_english_summary":"This instrument prescribes the \"Cyber Security Business Connect and Protect Program\" under the Industry Research and Development Act 1986 and brings the measure into force. It enables the Commonwealth (via the Minister’s power under s33) to fund organisations to raise cyber‑security awareness and to strengthen cyber resilience in small and medium enterprises, by supporting capability‑building and promoting action by those businesses."},"flash_summary_failed":{"failed":true,"reason":"Unauthenticated. Configure AI_GATEWAY_API_KEY or use a provider module. Learn more: https://ai-sdk.dev/unauthenticated-ai-gateway","source":"analysis-cron"}},"importantCases":[],"_links":{"self":"/api/acts/industry-research-and-development-cyber-security-business-connect-and-protect-program-instrument-202","history":"/api/acts/industry-research-and-development-cyber-security-business-connect-and-protect-program-instrument-202/history","analysis":"/api/acts/industry-research-and-development-cyber-security-business-connect-and-protect-program-instrument-202/analysis","conflicts":"/api/acts/industry-research-and-development-cyber-security-business-connect-and-protect-program-instrument-202/conflicts","importantCases":"/api/acts/industry-research-and-development-cyber-security-business-connect-and-protect-program-instrument-202/important-cases","documents":"/api/acts/industry-research-and-development-cyber-security-business-connect-and-protect-program-instrument-202/documents"}}